# Top

**URL:** https://discuss.elastic.co/top.md?page=1607&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1608

---

## [Terms query takes lots of cpu usage](https://discuss.elastic.co/t/terms-query-takes-lots-of-cpu-usage/86765)

<div class="topic-metadata">

**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\
**Replies:** 3\
**Last updated:** [May 23, 2017, 4:03pm UTC](https://discuss.elastic.co/t/terms-query-takes-lots-of-cpu-usage/86765 "2017-05-23T16:03:59Z")

</div>

I am using terms query to find the followers of a user. For that, I fetch the follower ids of that user and use terms query to get the user result from elasticsearch. But when I run the query it took lots of CPU. I gues…

---

## [Logstash 2.2.2 stops sending messages](https://discuss.elastic.co/t/logstash-2-2-2-stops-sending-messages/58998)

<div class="topic-metadata">

**Author:** [@Dennis\_Au](https://discuss.elastic.co/u/Dennis_Au)\
**Replies:** 3\
**Last updated:** [August 26, 2016, 10:14pm UTC](https://discuss.elastic.co/t/logstash-2-2-2-stops-sending-messages/58998 "2016-08-26T22:14:25Z")

</div>

I'm having an issue with Logstash 2.2.2 with Oracle Java 1.8 just stopping and can't figure out what the issue is. There are multiple logstash processes running (one for windows, and one for syslog) listening on diff…

---

## [How to predict or estimate merge will be triggered](https://discuss.elastic.co/t/how-to-predict-or-estimate-merge-will-be-triggered/56823)

<div class="topic-metadata">

**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\
**Replies:** 3\
**Last updated:** [August 1, 2016, 1:40am UTC](https://discuss.elastic.co/t/how-to-predict-or-estimate-merge-will-be-triggered/56823 "2016-08-01T01:40:58Z")

</div>

Is there a way to predict or estimate merge will be triggered during indexing time? I use Elasticsearch 1.7.2 and all settings about merge is by default.

---

## [Transport client backward compatibility](https://discuss.elastic.co/t/transport-client-backward-compatibility/49157)

<div class="topic-metadata">

**Author:** [@Shoham\_Ben\_Shitrit](https://discuss.elastic.co/u/Shoham_Ben_Shitrit)\
**Replies:** 3\
**Last updated:** [May 4, 2016, 12:22pm UTC](https://discuss.elastic.co/t/transport-client-backward-compatibility/49157 "2016-05-04T12:22:55Z")

</div>

Will 2.2/2.3 Elastic Java transport client work on 1.5.1/1.7 versions? And the same in 5, will it have backward compatibility for versions 2.x and 1.x?

---

## [Multiple nodes on one machine](https://discuss.elastic.co/t/multiple-nodes-on-one-machine/7283)

<div class="topic-metadata">

**Author:** [@Andrej](https://discuss.elastic.co/u/Andrej)\
**Replies:** 3\
**Last updated:** [April 11, 2012, 2:21am UTC](https://discuss.elastic.co/t/multiple-nodes-on-one-machine/7283 "2012-04-11T02:21:52Z")

</div>

Hi, I'm a bit stuck with trying to run several elasticsearch nodes (of the same cluster) on one machine. From a few posts I found this should be possible, so could someone maybe give a hint on how configuration has …

---

## [ES|QL "Unknown column \[process.name\]" after upgrading to 8.17](https://discuss.elastic.co/t/es-ql-unknown-column-process-name-after-upgrading-to-8-17/373083)

<div class="topic-metadata">

**Author:** [@isugg](https://discuss.elastic.co/u/isugg)\
**Replies:** 6\
**Last updated:** [February 4, 2025, 5:02pm UTC](https://discuss.elastic.co/t/es-ql-unknown-column-process-name-after-upgrading-to-8-17/373083 "2025-02-04T17:02:09Z")

</div>

After upgrading our Elastic stack to 8.17, we have began having issues with our ES|QL queries. When searching for process.name or process.command\_line in all logs, we receive the error "Unknown column \[process.name\]" eve…

---

## [Ingestion not consistent, data loss](https://discuss.elastic.co/t/ingestion-not-consistent-data-loss/330512)

<div class="topic-metadata">

**Author:** [@Rui\_Goncalves](https://discuss.elastic.co/u/Rui_Goncalves)\
**Replies:** 6\
**Last updated:** [May 4, 2023, 6:44am UTC](https://discuss.elastic.co/t/ingestion-not-consistent-data-loss/330512 "2023-05-04T06:44:06Z")

</div>

Hi, We're ingesting a big amount of data from an oracle database into elastic through logstash. We import some oracle table information into different arrays in elastic. Each table corresponding to an array, and each r…

---

## [Master takes another cluster UUID when recovers](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026)

<div class="topic-metadata">

**Author:** [@akshaygupta2208](https://discuss.elastic.co/u/akshaygupta2208)\
**Replies:** 6\
**Last updated:** [June 6, 2021, 11:30am UTC](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026 "2021-06-06T11:30:12Z")

</div>

Hello, I am running an Elasticsearch cluster on the Kubernetes cluster. My cluster has the following nodes. Master nodes : 3 Data nodes : 3 Client nodes : minimum 2(they can vary on autoscaling) My Data nodes have …

---

## [Issue after disk problem: java.lang.IllegalArgumentException: requested snapshot generation \[10\] is not available. Min referenced generation is \[11\]](https://discuss.elastic.co/t/issue-after-disk-problem-java-lang-illegalargumentexception-requested-snapshot-generation-10-is-not-available-min-referenced-generation-is-11/264305)

<div class="topic-metadata">

**Author:** [@nico127](https://discuss.elastic.co/u/nico127)\
**Replies:** 6\
**Last updated:** [February 17, 2021, 3:01pm UTC](https://discuss.elastic.co/t/issue-after-disk-problem-java-lang-illegalargumentexception-requested-snapshot-generation-10-is-not-available-min-referenced-generation-is-11/264305 "2021-02-17T15:01:18Z")

</div>

Hi. We've had a disk problem last night, causing a whole slew of issues in our Elasticsearch cluster. We've been able to resolve all of them but one: 1 (replica-less) shard is problematic. However, this is an issue we ha…

---

## [Need help in setting production enviorment](https://discuss.elastic.co/t/need-help-in-setting-production-enviorment/64098)

<div class="topic-metadata">

**Author:** [@banu](https://discuss.elastic.co/u/banu)\
**Replies:** 6\
**Last updated:** [October 27, 2016, 9:57am UTC](https://discuss.elastic.co/t/need-help-in-setting-production-enviorment/64098 "2016-10-27T09:57:19Z")

</div>

I am new to elastic search. I am doing POC on set-up production environment. I need help to do this. 1) What are the production parameters we need to consider when setting the environment ? 3) what are all the waterm…

---

## [All shards failed across multiple indexes](https://discuss.elastic.co/t/all-shards-failed-across-multiple-indexes/301033)

<div class="topic-metadata">

**Author:** [@adowney-lm](https://discuss.elastic.co/u/adowney-lm)\
**Replies:** 5\
**Last updated:** [May 5, 2022, 1:30am UTC](https://discuss.elastic.co/t/all-shards-failed-across-multiple-indexes/301033 "2022-05-05T01:30:29Z")

</div>

We are using 7.7.1 ELK and have a simple, single node, setup with a couple of dozen indexes. I'm finding a very large number of "all shards failed" messages in the logs, and have seen a connection failure for a minute o…

---

## [Logstash - based on filed type create a new field](https://discuss.elastic.co/t/logstash-based-on-filed-type-create-a-new-field/283684)

<div class="topic-metadata">

**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\
**Replies:** 5\
**Last updated:** [September 9, 2021, 10:43am UTC](https://discuss.elastic.co/t/logstash-based-on-filed-type-create-a-new-field/283684 "2021-09-09T10:43:42Z")

</div>

Hello, I've been trying for 1-2 days to figure out why to create new fields when the type of the event is object but I cant seem to make it work.. This is the error im getting: Could not index event to Elasticsearch. …

---

## [Alert When - system\_fails\_to\_provide\_data - dynamic group of sending hosts](https://discuss.elastic.co/t/alert-when-system-fails-to-provide-data-dynamic-group-of-sending-hosts/265094)

<div class="topic-metadata">

**Author:** [@bbek](https://discuss.elastic.co/u/bbek)\
**Replies:** 5\
**Last updated:** [March 9, 2021, 9:08am UTC](https://discuss.elastic.co/t/alert-when-system-fails-to-provide-data-dynamic-group-of-sending-hosts/265094 "2021-03-09T09:08:48Z")

</div>

I have a use case to alert when a host fails to send logs. There is a watcher configured here, which is similar to what I'm trying to achieve: I like the logic, aggregate hosts on last 24 hours, then check for last 5 …

---

## [Logstash throws runtime exception while parsing huge XML](https://discuss.elastic.co/t/logstash-throws-runtime-exception-while-parsing-huge-xml/231621)

<div class="topic-metadata">

**Author:** [@Saravana\_Maadavan](https://discuss.elastic.co/u/Saravana_Maadavan)\
**Replies:** 5\
**Last updated:** [May 21, 2020, 7:04am UTC](https://discuss.elastic.co/t/logstash-throws-runtime-exception-while-parsing-huge-xml/231621 "2020-05-21T07:04:22Z")

</div>

Hello, In Logstash I am trying to replace a prefix in the XML which is not having any definition and then indexing it to elastic. Receiving error while parsing some huge XMLs. I would be requiring the full XML to be sto…

---

## [Using packetbeat with macos/ios remote virutal interface](https://discuss.elastic.co/t/using-packetbeat-with-macos-ios-remote-virutal-interface/183604)

<div class="topic-metadata">

**Author:** [@stru](https://discuss.elastic.co/u/stru)\
**Replies:** 5\
**Last updated:** [July 22, 2019, 4:37pm UTC](https://discuss.elastic.co/t/using-packetbeat-with-macos-ios-remote-virutal-interface/183604 "2019-07-22T16:37:02Z")

</div>

Does packetbeat support use of the remote virtual interface on macOS? If so, what needs to be done to get it to work correctly. I am getting this error when trying to run packetbeat with rvi0 as an interface in packetbe…

---

## [Apache kafka heartbeat creation](https://discuss.elastic.co/t/apache-kafka-heartbeat-creation/190016)

<div class="topic-metadata">

**Author:** [@Neha\_Chaturvedi](https://discuss.elastic.co/u/Neha_Chaturvedi)\
**Replies:** 5\
**Last updated:** [July 11, 2019, 6:01pm UTC](https://discuss.elastic.co/t/apache-kafka-heartbeat-creation/190016 "2019-07-11T18:01:40Z")

</div>

Hi Team , I am unable to create heartbeat monitors for the apache kafka endpoints. Can some one please help me out. heartbeat.yml type: http urls: \["http://localhost:9092"\] schedule: '\*/10 \* \* \* \* \* \*' Logs in ki…

---

## [Why \_grokparsefailer doesn't give specific error](https://discuss.elastic.co/t/why-grokparsefailer-doesnt-give-specific-error/124462)

<div class="topic-metadata">

**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\
**Replies:** 5\
**Last updated:** [March 19, 2018, 4:07pm UTC](https://discuss.elastic.co/t/why-grokparsefailer-doesnt-give-specific-error/124462 "2018-03-19T16:07:45Z")

</div>

Hello Good folks, when we have grokparseerror, how can I understand where the error is generated while parsing? I just tried to grab the first two fields from the file using the following grok filter. It threw error wi…

---

## [Why the elastic app index no become precarious 5.4.2 use esrally](https://discuss.elastic.co/t/why-the-elastic-app-index-no-become-precarious-5-4-2-use-esrally/97189)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 5\
**Last updated:** [August 18, 2017, 6:15am UTC](https://discuss.elastic.co/t/why-the-elastic-app-index-no-become-precarious-5-4-2-use-esrally/97189 "2017-08-18T06:15:32Z")

</div>

in x-pack monitoring Indexing Rate

---

## [Multi-tenancy strategy: 1 index with 1 shard and 1 replica per client](https://discuss.elastic.co/t/multi-tenancy-strategy-1-index-with-1-shard-and-1-replica-per-client/18358)

<div class="topic-metadata">

**Author:** [@Drew\_Kutcharian](https://discuss.elastic.co/u/Drew_Kutcharian)\
**Replies:** 5\
**Last updated:** [June 27, 2014, 5:25am UTC](https://discuss.elastic.co/t/multi-tenancy-strategy-1-index-with-1-shard-and-1-replica-per-client/18358 "2014-06-27T05:25:08Z")

</div>

Hey Guys, I'm working on an analytics dashboard project where we collect events into Elasticsearch for clients. Each client could have millions of events per month. We are thinking of using one index with one shard an…

---

## [EsRejectedExecutionException when searching date based indices](https://discuss.elastic.co/t/esrejectedexecutionexception-when-searching-date-based-indices/16020)

<div class="topic-metadata">

**Author:** [@Alex\_Clark\_2](https://discuss.elastic.co/u/Alex_Clark_2)\
**Replies:** 5\
**Last updated:** [February 26, 2014, 10:01pm UTC](https://discuss.elastic.co/t/esrejectedexecutionexception-when-searching-date-based-indices/16020 "2014-02-26T22:01:37Z")

</div>

Hello all, I’m getting failed nodes when running searches and I’m hoping someone can point me in the right direction. I have indices created per day to store messages. The pattern is pretty straight forward: the…

---

## [BUG?: faceting on nested-documents (with scope) doesn't take filter on parent-docs into account](https://discuss.elastic.co/t/bug-faceting-on-nested-documents-with-scope-doesnt-take-filter-on-parent-docs-into-account/10152)

<div class="topic-metadata">

**Author:** [@Geert\_Jan\_Brits](https://discuss.elastic.co/u/Geert_Jan_Brits)\
**Replies:** 5\
**Last updated:** [December 21, 2012, 12:58pm UTC](https://discuss.elastic.co/t/bug-faceting-on-nested-documents-with-scope-doesnt-take-filter-on-parent-docs-into-account/10152 "2012-12-21T12:58:51Z")

</div>

I'm banging my head against the wall on trying on faceting on nested-documents with: - a filter on the nested documents - a filter on the 'parent' documents To me the query (at end of post) should just work. E…

---

## [Missing binaries - error 404 Elastic's Repo](https://discuss.elastic.co/t/missing-binaries-error-404-elastics-repo/292105)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 1\
**Last updated:** [December 17, 2021, 1:30pm UTC](https://discuss.elastic.co/t/missing-binaries-error-404-elastics-repo/292105 "2021-12-17T13:30:28Z")

</div>

Hi there, you announced version 7.16.1 of your stack, but I get error 404 since yesterday when I try to download the newest metricbet and journalbeat. Please check your repository. Thanks https://www.elastic.co/downl…

---

## [데이터 분석 목적으로 활용](https://discuss.elastic.co/t/topic/263356)

<div class="topic-metadata">

**Author:** [@ycseol](https://discuss.elastic.co/u/ycseol)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 2:46am UTC](https://discuss.elastic.co/t/topic/263356 "2021-02-18T02:46:09Z")

</div>

안녕하세요 데이버 분석 목적으로 Elasticsearch kibana 에서 1차 정제를 하려고 합니다. 1차 정제를 elastic kibana를 통해서 실시하고 정제된 데이터를 csv로 다운 받아서 데이터 분석가들이 분석을 하려고 합니다. 이럴 경우 비록 정제가 됐더라도 데이터가 많을 경우 메모리 오류가 날것 같은데 이런 경우 엘라스틱 을 잘못 활용한 케이스가 될까요?

---

## [Cloud run connect devices Cloud IoT Core](https://discuss.elastic.co/t/cloud-run-connect-devices-cloud-iot-core/303119)

<div class="topic-metadata">

**Author:** [@dhattu](https://discuss.elastic.co/u/dhattu)\
**Replies:** 1\
**Last updated:** [April 25, 2022, 10:11pm UTC](https://discuss.elastic.co/t/cloud-run-connect-devices-cloud-iot-core/303119 "2022-04-25T22:11:15Z")

</div>

I have a IoT architecture which I have differents devices sending info to Google Cloud using MQTT. I am in a dev enviorement and I don'r have the real devices so I am trying to simulate them with a Cloud Run (Just try to…

---

## [How to convert field with "null" string value to 0 integer](https://discuss.elastic.co/t/how-to-convert-field-with-null-string-value-to-0-integer/264216)

<div class="topic-metadata">

**Author:** [@Die\_Meester](https://discuss.elastic.co/u/Die_Meester)\
**Replies:** 1\
**Last updated:** [February 14, 2021, 2:53am UTC](https://discuss.elastic.co/t/how-to-convert-field-with-null-string-value-to-0-integer/264216 "2021-02-14T02:53:36Z")

</div>

Hi, I am receiving the below error whilst trying to use filebeat to read log. I know that I can explicitly exclude the field %{processID} by appending ? %{?processID}, but sometimes the processID is valid integer and p…

---

## [RemoteTransportException caused by NullPointerException when trying to create snapshot through Kibana UI](https://discuss.elastic.co/t/remotetransportexception-caused-by-nullpointerexception-when-trying-to-create-snapshot-through-kibana-ui/222287)

<div class="topic-metadata">

**Author:** [@bcbrockway](https://discuss.elastic.co/u/bcbrockway)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 3:28pm UTC](https://discuss.elastic.co/t/remotetransportexception-caused-by-nullpointerexception-when-trying-to-create-snapshot-through-kibana-ui/222287 "2020-03-05T15:28:08Z")

</div>

We're running an ES cluster using cloud-on-k8s and when I try and create a snapshot using the Kibana UI I get the following errors from elasticsearch and kibana: portal-elastic-es-main-0 elasticsearch {"type": "server",…

---

## [Kibana Graph Free Version](https://discuss.elastic.co/t/kibana-graph-free-version/201382)

<div class="topic-metadata">

**Author:** [@sbharadwaj145](https://discuss.elastic.co/u/sbharadwaj145)\
**Replies:** 1\
**Last updated:** [September 27, 2019, 12:16pm UTC](https://discuss.elastic.co/t/kibana-graph-free-version/201382 "2019-09-27T12:16:12Z")

</div>

I wanted to know whether graph in kibana is available in basic free version or not. If not then in which subscription does it supported?

---

## [Logstash Config File Error: type 'string'](https://discuss.elastic.co/t/logstash-config-file-error-type-string/158915)

<div class="topic-metadata">

**Author:** [@victorhearnyeates](https://discuss.elastic.co/u/victorhearnyeates)\
**Replies:** 1\
**Last updated:** [November 30, 2018, 5:50pm UTC](https://discuss.elastic.co/t/logstash-config-file-error-type-string/158915 "2018-11-30T17:50:49Z")

</div>

Hi, I'm currently trying to ingest a CSV file containing blogposts, and I'm getting the error Exiting: error loading config file: type 'string' is not supported on top level of config, only dictionary or list (source:'…

---

## [Scaling ELK stack for monitoring performance of my servers](https://discuss.elastic.co/t/scaling-elk-stack-for-monitoring-performance-of-my-servers/96846)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 1\
**Last updated:** [August 12, 2017, 5:34pm UTC](https://discuss.elastic.co/t/scaling-elk-stack-for-monitoring-performance-of-my-servers/96846 "2017-08-12T17:34:21Z")

</div>

Hi, I am new to ELK. I have to monitor daily performance of different servers of mine on my Kibana Dashboards (monitoring basically CPU, disk usage, health, traffic etc). Here I am having 5 different servers. I have my …

---

## [Persistent Volume mapping in ES cluster using Kubernetes](https://discuss.elastic.co/t/persistent-volume-mapping-in-es-cluster-using-kubernetes/94205)

<div class="topic-metadata">

**Author:** [@Dhopu\_K](https://discuss.elastic.co/u/Dhopu_K)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 1:03am UTC](https://discuss.elastic.co/t/persistent-volume-mapping-in-es-cluster-using-kubernetes/94205 "2017-07-24T01:03:56Z")

</div>

We plan to set up a ES cluster using Kubernetes. The k8s pod will consist of 3 data nodes and we intend to have persistent volume mapping for the data. In a pod, a volume is usually shared but as I understand, in this ca…

---

## [Partial update documents while making sure only newer version doc could be updated successfully?](https://discuss.elastic.co/t/partial-update-documents-while-making-sure-only-newer-version-doc-could-be-updated-successfully/82810)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 1\
**Last updated:** [April 20, 2017, 2:27pm UTC](https://discuss.elastic.co/t/partial-update-documents-while-making-sure-only-newer-version-doc-could-be-updated-successfully/82810 "2017-04-20T14:27:10Z")

</div>

Sorry to ask the same question again, as the thread I asked for the same question was locked. We are now using Elasticsearch 5.2.0 to provide full-text search on our various web sites. Our search platform works just li…

---

## [How to make custom sidebar tabs in Kibana?](https://discuss.elastic.co/t/how-to-make-custom-sidebar-tabs-in-kibana/66052)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [November 15, 2016, 4:45am UTC](https://discuss.elastic.co/t/how-to-make-custom-sidebar-tabs-in-kibana/66052 "2016-11-15T04:45:04Z")

</div>

Hi, In Kibana 5, there are lots of tabs with icons in the blue sidebar like Discover, Timelion etc. When I installed X-Pack, lot of new tabs came. I would like to know if its possible to make custom tabs in sidebar, wh…

---

## [Wild card or pattern in Kibana query?](https://discuss.elastic.co/t/wild-card-or-pattern-in-kibana-query/54108)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [June 28, 2016, 6:39am UTC](https://discuss.elastic.co/t/wild-card-or-pattern-in-kibana-query/54108 "2016-06-28T06:39:17Z")

</div>

Hi, I am creating linchart in Kibana for some URLs. There are few URLs like: /myApplication/v2.0/card-history/9999-00/ /myApplication//v2.0/card-history/checkcardexist/9999-00?query 9999-00 is the card number. When I ha…

---

## [Horizontally scaling Logstash - Per User Guide](https://discuss.elastic.co/t/horizontally-scaling-logstash-per-user-guide/39340)

<div class="topic-metadata">

**Author:** [@jt1522](https://discuss.elastic.co/u/jt1522)\
**Replies:** 1\
**Last updated:** [January 16, 2016, 1:16am UTC](https://discuss.elastic.co/t/horizontally-scaling-logstash-per-user-guide/39340 "2016-01-16T01:16:09Z")

</div>

I have been working with the ELK stack for quite some time, but now that I am going to production I need to scale Logstash for larger throughput. I have seen the guide which shows the distributed layout: https://www.e…

---

## [Access the score values in Visuals](https://discuss.elastic.co/t/access-the-score-values-in-visuals/26077)

<div class="topic-metadata">

**Author:** [@anmolkoul](https://discuss.elastic.co/u/anmolkoul)\
**Replies:** 1\
**Last updated:** [July 22, 2015, 6:54pm UTC](https://discuss.elastic.co/t/access-the-score-values-in-visuals/26077 "2015-07-22T18:54:48Z")

</div>

Hi All, I have setup my index in elastic search and have connected kibana to it. In the discover tab when i write a query i get my resulting documents which i know are sorted by a match score by Elasticsearch. How can …

---

## [Elk 1.4.2 + kibana-3.1.2 Connection Failed, add "http.cors.enabled: true" does not help](https://discuss.elastic.co/t/elk-1-4-2-kibana-3-1-2-connection-failed-add-http-cors-enabled-true-does-not-help/21706)

<div class="topic-metadata">

**Author:** [@EShen](https://discuss.elastic.co/u/EShen)\
**Replies:** 1\
**Last updated:** [January 20, 2015, 9:23pm UTC](https://discuss.elastic.co/t/elk-1-4-2-kibana-3-1-2-connection-failed-add-http-cors-enabled-true-does-not-help/21706 "2015-01-20T21:23:39Z")

</div>

1. install elastic search 1.4.2 (up and running http://hostip:9200 works) 2. install kibana 3.1.2 3. install lighthttpd. 1,2,3 are in the same node. 1,2,3 are run by same user/group. Could anyone help? con…

---

## [Searching on multiple indices elasticsearchclient(nodejs module)](https://discuss.elastic.co/t/searching-on-multiple-indices-elasticsearchclient-nodejs-module/8149)

<div class="topic-metadata">

**Author:** [@Aruna](https://discuss.elastic.co/u/Aruna)\
**Replies:** 1\
**Last updated:** [June 23, 2012, 12:46pm UTC](https://discuss.elastic.co/t/searching-on-multiple-indices-elasticsearchclient-nodejs-module/8149 "2012-06-23T12:46:26Z")

</div>

Hi, i am using elasticsearch, river couchdb plugin and node elasticsearch client to search data from my couchdb. my code like this for searching data using one index testSearch = function() { …

---

## [Kibana Task Manager (KTM) not reporting accurate observed Kibana instances values](https://discuss.elastic.co/t/kibana-task-manager-ktm-not-reporting-accurate-observed-kibana-instances-values/339624)

<div class="topic-metadata">

**Author:** [@JGreene](https://discuss.elastic.co/u/JGreene)\
**Replies:** 0\
**Last updated:** [July 30, 2023, 4:48pm UTC](https://discuss.elastic.co/t/kibana-task-manager-ktm-not-reporting-accurate-observed-kibana-instances-values/339624 "2023-07-30T16:48:50Z")

</div>

Hello, Looking for guidance on troubleshooting Kibana Task Manager reporting "observed":{"observed\_kibana\_instances":1 when there are 12 instances in total. Other clusters (7.16.X) report their total Kibana instances a…

---

## [Report of Total Inventory](https://discuss.elastic.co/t/report-of-total-inventory/310496)

<div class="topic-metadata">

**Author:** [@Ashish10195](https://discuss.elastic.co/u/Ashish10195)\
**Replies:** 0\
**Last updated:** [July 25, 2022, 4:57am UTC](https://discuss.elastic.co/t/report-of-total-inventory/310496 "2022-07-25T04:57:43Z")

</div>

Hi ,How can we download/Export total devices inventory on which Agent is installed .

---

## [Cleaning up datastreams' indexes](https://discuss.elastic.co/t/cleaning-up-datastreams-indexes/299499)

<div class="topic-metadata">

**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 8:24pm UTC](https://discuss.elastic.co/t/cleaning-up-datastreams-indexes/299499 "2022-03-11T20:24:27Z")

</div>

Hi there Elastic community, I'm really new to Elastic and run into an architectural problem with my cloud cluster. I need to delete unneeded old indices to free up some memory. I would like to know what would be the be…

---

## [How to use QueryBuilders class for MultiMatchQuery in Elasticsearch 8.x](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765)

<div class="topic-metadata">

**Author:** [@Olayode\_possible](https://discuss.elastic.co/u/Olayode_possible)\
**Replies:** 2\
**Last updated:** [November 30, 2022, 7:43am UTC](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765 "2022-11-30T07:43:58Z")

</div>

Hi everyone, I am a newbie in Elasticseach and am trying out stuff in order to gain more knowledge. I need help converting the below line of code written in Elasticseach 7.x to 8.x standard. any pointers to resources…

---

## [JsonParsingException: expected:',', actual:'"application/pdf; version=1.7"', at offset:428](https://discuss.elastic.co/t/jsonparsingexception-expected-actual-application-pdf-version-1-7-at-offset-428/314857)

<div class="topic-metadata">

**Author:** [@Roman\_Cerny](https://discuss.elastic.co/u/Roman_Cerny)\
**Replies:** 2\
**Last updated:** [September 29, 2022, 6:08am UTC](https://discuss.elastic.co/t/jsonparsingexception-expected-actual-application-pdf-version-1-7-at-offset-428/314857 "2022-09-29T06:08:34Z")

</div>

Hello there, I'm new to Elasticsearch and I'm trying to set up a cloud solution of Elasticsearch on azure with .Net 6.0 and a NEST, but I encoutered a problem when working with 7.17.4 NEST and 8.x version of Elasticsear…

---

## [Confusion matrix](https://discuss.elastic.co/t/confusion-matrix/248171)

<div class="topic-metadata">

**Author:** [@Eugene\_Dobrovolskyi](https://discuss.elastic.co/u/Eugene_Dobrovolskyi)\
**Replies:** 2\
**Last updated:** [September 10, 2020, 9:16pm UTC](https://discuss.elastic.co/t/confusion-matrix/248171 "2020-09-10T21:16:36Z")

</div>

Hi all! I am looking for a way to build a confusion matrix for image detection results (machine learning domain). I already uploaded my data to ElasticSearch and built index patterns for it. I tried different existing v…

---

## [Create root field for all fields](https://discuss.elastic.co/t/create-root-field-for-all-fields/245740)

<div class="topic-metadata">

**Author:** [@logger](https://discuss.elastic.co/u/logger)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 1:49pm UTC](https://discuss.elastic.co/t/create-root-field-for-all-fields/245740 "2020-08-20T13:49:01Z")

</div>

Hi there, I have a question about ruby or anything else if it is possible. @Badger had a nice ruby script a few years ago. But it doesnt work right now and I am not familiar with ruby. ruby { init =\> ' E…

---

## [Parallel search after](https://discuss.elastic.co/t/parallel-search-after/241777)

<div class="topic-metadata">

**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\
**Replies:** 2\
**Last updated:** [July 23, 2020, 4:35pm UTC](https://discuss.elastic.co/t/parallel-search-after/241777 "2020-07-23T16:35:54Z")

</div>

Hi, How can search after can be parallel if results from the previous page help the retrieval of the next page? but I can see in the documentation that it is parallel thanks, Liron

---

## [ビジュアライゼーションでソート順が崩れる](https://discuss.elastic.co/t/topic/235044)

<div class="topic-metadata">

**Author:** [@masahiro](https://discuss.elastic.co/u/masahiro)\
**Replies:** 2\
**Last updated:** [June 4, 2020, 11:16pm UTC](https://discuss.elastic.co/t/topic/235044 "2020-06-04T23:16:35Z")

</div>

Kibanaのvisualization（Vertical Bar）で指定したソート順（アルファベット順）が フィルタを追加したときに崩れてしまします。 社内のデータで発生しているのですが、公開されているデータでも再現しました。 回避策があれば、ご教示ください。 環境： Kibana version: 7.7.0 OS version: Windows 10 Home 1903 Browser version: Googl…

---

## [Quantitative Cluster Sizing](https://discuss.elastic.co/t/quantitative-cluster-sizing/219850)

<div class="topic-metadata">

**Author:** [@sks1234](https://discuss.elastic.co/u/sks1234)\
**Replies:** 2\
**Last updated:** [February 24, 2020, 5:35am UTC](https://discuss.elastic.co/t/quantitative-cluster-sizing/219850 "2020-02-24T05:35:21Z")

</div>

Hi I am looking for Sizing Elastic Search Cluster and came across below session which is very informative. https://www.elastic.co/webinars/elasticsearch-sizing-and-capacity-planning I have few questions regarding the se…

---

## [How to remove the root element while xml parsing using Logstash?](https://discuss.elastic.co/t/how-to-remove-the-root-element-while-xml-parsing-using-logstash/209412)

<div class="topic-metadata">

**Author:** [@Reshmi](https://discuss.elastic.co/u/Reshmi)\
**Replies:** 2\
**Last updated:** [November 27, 2019, 6:13am UTC](https://discuss.elastic.co/t/how-to-remove-the-root-element-while-xml-parsing-using-logstash/209412 "2019-11-27T06:13:10Z")

</div>

My sample XML structure is as below: \<Order BillToID="123"\> \<PersonInfo Address="abc"\>\</PersonInfo\> \<OrderLines\> \<OrderLine DeliveryMethod="xyz"\>\</OrderLine\> \</OrderLines\> \</Order\> With the below code: …

---

## [Calculate elapsed time for multiple end events](https://discuss.elastic.co/t/calculate-elapsed-time-for-multiple-end-events/205319)

<div class="topic-metadata">

**Author:** [@Patrick\_Gell](https://discuss.elastic.co/u/Patrick_Gell)\
**Replies:** 2\
**Last updated:** [November 6, 2019, 4:50am UTC](https://discuss.elastic.co/t/calculate-elapsed-time-for-multiple-end-events/205319 "2019-11-06T04:50:32Z")

</div>

Hello, I have a message driven system where one message is sent to multiple receiver. Now I wanted to track the time it takes for every receiver until the message arrives. The structure of my log entries looks like: T…

---

## [Winlogbeat v7 to NiFi partial messages](https://discuss.elastic.co/t/winlogbeat-v7-to-nifi-partial-messages/201436)

<div class="topic-metadata">

**Author:** [@Pavel201909](https://discuss.elastic.co/u/Pavel201909)\
**Replies:** 2\
**Last updated:** [September 30, 2019, 4:07pm UTC](https://discuss.elastic.co/t/winlogbeat-v7-to-nifi-partial-messages/201436 "2019-09-30T16:07:10Z")

</div>

Hi All, I ship windows events using ListenBeats in NiFi, however some messages arrive truncated. So far I can't identify a pattern why this happens. what I get on NiFi is this mess: I can see some non-printable char…

[Previous page](https://discuss.elastic.co/top.md?page=1606&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1608&per_page=50&period=all)
